Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/f40a319f-feb8-33ea-8a99-b02869d401c2.roa
File:                     f40a319f-feb8-33ea-8a99-b02869d401c2.roa (raw, json)
Hash identifier:          U9S0rZ0EOI70Ceaf2VP7eyekD2qQ67+eeKlJ16Abqrw=
Subject key identifier:   5B:E9:25:D3:AF:86:3F:C4:FF:C1:D5:1A:91:4F:FD:86:28:4F:E1:14
Certificate issuer:       /CN=a9d8715f-6d4a-4b9f-93ff-8eb251588f61
Certificate serial:       010D0C9F43285847299B0F68C45E671E008F1500
Authority key identifier: A6:25:D6:7E:3C:AB:C9:7A:58:9A:30:A3:BB:F5:E1:BC:A6:5B:0F:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/f40a319f-feb8-33ea-8a99-b02869d401c2.roa
Signing time:             Tue 10 Sep 2024 01:00:30 +0000
ROA not before:           Tue 10 Sep 2024 01:00:30 +0000
ROA not after:            Mon 09 Dec 2024 02:00:30 +0000
asID:                     39937
IP address blocks:        2607:5240:2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:29:9b:0f:68:c4:5e:67:1e:00:8f:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9d8715f-6d4a-4b9f-93ff-8eb251588f61
        Validity
            Not Before: Sep 10 01:00:30 2024 GMT
            Not After : Dec  9 02:00:30 2024 GMT
        Subject: CN=9e3b2102-5440-4812-89f7-db6f06f55fd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d7:1c:9c:4e:6d:27:7b:8f:bc:8c:2c:24:58:
                    7b:5c:75:68:ee:24:fa:8a:48:85:02:06:94:19:cb:
                    8e:a6:6f:97:e1:08:e2:77:e1:cf:d0:f1:c7:18:d2:
                    a3:03:6f:4b:a1:33:af:a0:4b:d6:2b:02:e3:ae:bd:
                    3c:46:b5:0f:e5:2f:de:81:b0:4a:61:99:1f:a2:73:
                    26:53:c4:b8:6e:cf:09:76:6e:13:cc:c5:45:16:1b:
                    69:01:db:0b:c2:0d:f6:fa:b5:ce:e1:59:98:41:11:
                    c0:bf:f4:38:fb:da:0b:97:0d:fe:8e:e8:0a:20:2e:
                    51:37:42:c4:90:b8:28:b5:30:78:17:e4:4a:73:28:
                    b6:91:96:33:87:33:a0:f8:e6:0b:26:8c:0a:a7:df:
                    c9:f0:a7:da:7c:ad:4d:a1:a6:d2:86:8f:8b:fb:17:
                    07:96:e9:62:99:bf:d9:10:16:70:35:72:3b:11:ea:
                    82:e2:20:6e:b9:ad:e3:dc:47:e8:2e:67:81:c5:49:
                    1d:1a:36:3c:77:f7:5b:97:85:b9:e4:90:55:83:c0:
                    4d:5d:7d:86:7b:ba:3e:cc:53:69:51:5f:90:da:dd:
                    cd:33:11:c4:40:ad:4d:d7:ec:0b:96:0e:d3:88:ae:
                    c6:3a:be:8b:e0:f9:98:79:6a:b2:fd:2b:34:8f:f3:
                    f6:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:E9:25:D3:AF:86:3F:C4:FF:C1:D5:1A:91:4F:FD:86:28:4F:E1:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/f40a319f-feb8-33ea-8a99-b02869d401c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.crl

            X509v3 Authority Key Identifier:
                keyid:A6:25:D6:7E:3C:AB:C9:7A:58:9A:30:A3:BB:F5:E1:BC:A6:5B:0F:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:5240:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:35:b3:da:d2:c2:00:6a:20:f6:b2:70:ea:5b:a8:68:0c:ad:
         0b:2b:1d:d6:3f:58:ab:24:46:1c:73:d1:a7:39:d5:d7:f7:0e:
         ec:99:a7:a0:3b:48:80:66:2b:d7:f3:7a:4f:a9:73:a3:8f:d8:
         ef:19:23:ae:33:22:fb:d2:c7:22:89:9d:f1:5d:57:fb:94:44:
         b4:5f:7a:58:ff:81:dc:69:9f:cd:59:4f:2a:6b:50:c4:5f:eb:
         e3:7e:cb:bf:c0:3c:52:cf:09:46:f7:6c:38:75:ee:02:fc:21:
         50:4c:e8:6d:56:be:6c:02:4f:d6:60:49:a1:47:7a:5b:cd:44:
         37:cc:8c:69:19:fe:c2:ae:33:8d:f5:10:66:9e:f8:93:3d:39:
         49:30:7e:29:57:c2:04:71:95:d7:ad:6b:10:5e:32:b5:91:90:
         58:74:88:4c:a4:38:55:32:c6:05:fd:1e:1c:8c:68:d0:51:b1:
         52:bf:73:6b:89:d8:f6:0d:4d:78:a2:f1:6a:b8:71:69:d0:19:
         30:f0:90:41:fc:13:64:79:25:ee:88:33:d6:68:31:f3:1c:ec:
         35:d4:d5:ed:cf:bd:45:8c:5f:f7:f9:59:46:09:5d:c7:41:90:
         a7:47:11:0d:bc:54:4f:aa:91:10:c3:4c:ae:d2:12:d8:d7:32:
         b5:ad:ae:05
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEcpmw9oxF5nHgCPFQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTlkODcxNWYtNmQ0YS00YjlmLTkzZmYtOGViMjUxNTg4
ZjYxMB4XDTI0MDkxMDAxMDAzMFoXDTI0MTIwOTAyMDAzMFowLzEtMCsGA1UEAxMk
OWUzYjIxMDItNTQ0MC00ODEyLTg5ZjctZGI2ZjA2ZjU1ZmQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NccnE5tJ3uPvIwsJFh7XHVo7iT6ikiFAgaU
GcuOpm+X4Qjid+HP0PHHGNKjA29LoTOvoEvWKwLjrr08RrUP5S/egbBKYZkfonMm
U8S4bs8Jdm4TzMVFFhtpAdsLwg32+rXO4VmYQRHAv/Q4+9oLlw3+jugKIC5RN0LE
kLgotTB4F+RKcyi2kZYzhzOg+OYLJowKp9/J8KfafK1NoabSho+L+xcHlulimb/Z
EBZwNXI7EeqC4iBuua3j3EfoLmeBxUkdGjY8d/dbl4W55JBVg8BNXX2Ge7o+zFNp
UV+Q2t3NMxHEQK1N1+wLlg7TiK7GOr6L4PmYeWqy/Ss0j/P27QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFvpJdOvhj/E/8HVGpFP/YYoT+EUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hOWQ4
NzE1Zi02ZDRhLTRiOWYtOTNmZi04ZWIyNTE1ODhmNjEvZjQwYTMxOWYtZmViOC0z
M2VhLThhOTktYjAyODY5ZDQwMWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTlkODcxNWYtNmQ0YS00YjlmLTkz
ZmYtOGViMjUxNTg4ZjYxL2E5ZDg3MTVmLTZkNGEtNGI5Zi05M2ZmLThlYjI1MTU4
OGY2MS5jcmwwHwYDVR0jBBgwFoAUpiXWfjyryXpYmjCju/XhvKZbD3owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hOWQ4NzE1Zi02ZDRhLTRiOWYtOTNmZi04ZWIy
NTE1ODhmNjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgdSQAAC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAG01s9rSwgBqIPaycOpbqGgMrQsrHdY/WKskRhxz0ac51df3DuyZ
p6A7SIBmK9fzek+pc6OP2O8ZI64zIvvSxyKJnfFdV/uURLRfelj/gdxpn81ZTypr
UMRf6+N+y7/APFLPCUb3bDh17gL8IVBM6G1WvmwCT9ZgSaFHelvNRDfMjGkZ/sKu
M431EGae+JM9OUkwfilXwgRxldetaxBeMrWRkFh0iEykOFUyxgX9HhyMaNBRsVK/
c2uJ2PYNTXii8Wq4cWnQGTDwkEH8E2R5Je6IM9ZoMfMc7DXU1e3PvUWMX/f5WUYJ
XcdBkKdHEQ28VE+qkRDDTK7SEtjXMrWtrgU=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:25:02 2024 by rpki-client on console-fra.rpki-client.org